finish. Bonus points if you bring: Experience with AppSec and DevSecOps. Hands-on knowledge of Azure, AWS, and/or Google Cloud. Familiarity with standards like ISO2700X, ISO31000, NIST800, PCI-DSS. Certifications such as CISSP, CCSP, CRISC, CISM, or SABSA. Why QBE? At My Best? At QBE, we want our people to feel rewarded and inspired to perform at More ❯
Hull, North Humberside, England, United Kingdom Hybrid / WFH Options
Heron Foods
incident response, containment, and recovery activities. Oversee vulnerability management: assessing risks, tracking remediation, and validating fixes. Support forensic investigations and evidence handling when needed. Contribute to compliance activities including PCIDSS evidence gathering and audit readiness. Deliver security awareness training, phishing simulations, and staff engagement campaigns. Provide local insights to the Group Information Security team to strengthen overall … experience: Experience working in security operations, SOC, or incident response. Knowledge of SIEM tools, vulnerability management, and log analysis. Understanding of security frameworks such as ISO 27001, NIST, or PCI DSS. Strong communication skills to engage with IT teams, business stakeholders, and non-technical staff. Ability to work independently at Heron Foods while remaining aligned to Group Information Security. More ❯
North Ferriby, North Humberside, North East, United Kingdom Hybrid / WFH Options
Heron Foods
incident response, containment, and recovery activities. Oversee vulnerability management: assessing risks, tracking remediation, and validating fixes. Support forensic investigations and evidence handling when needed. Contribute to compliance activities including PCIDSS evidence gathering and audit readiness. Deliver security awareness training, phishing simulations, and staff engagement campaigns. Provide local insights to the Group Information Security team to strengthen overall … experience: Experience working in security operations, SOC, or incident response. Knowledge of SIEM tools, vulnerability management, and log analysis. Understanding of security frameworks such as ISO 27001, NIST, or PCI DSS. Strong communication skills to engage with IT teams, business stakeholders, and non-technical staff. Ability to work independently at Heron Foods while remaining aligned to Group Information Security. More ❯
Borehamwood, Hertfordshire, England, United Kingdom Hybrid / WFH Options
Elysium Healthcare
informed on evolving frameworks, regulatory changes, and best practice in information security. It would be great if you also bring: Familiarity with broader regulatory frameworks such as ISO 27001, PCIDSS, or ICO guidance. Experience embedding compliance into projects, change programmes, and supplier contracts. This is a remote-based role, offering flexibility while ensuring close collaboration with colleagues More ❯
Information Security Management System (ISMS) Conduct regular risk assessments to identify and mitigate potential security threats Establish and manage a security incident response plan, documenting incidents and protocols Perform PCI Compliance auditing and ensure adherence to GDPR and the Data Protection Act 2018 Collaborate with security partners and stakeholders to maintain a robust security posture Continuously monitor security systems More ❯
Point. Experience with VPNs, IDS/IPS, and network protocols (TCP/IP, DNS, HTTP/S, etc.). Familiarity with security standards such as ISO 27001, NIST, or PCI-DSS is a plus. Relevant certifications such as CISSP, CCNP Security, Palo Alto PCNSE, or Fortinet NSE preferred. Excellent problem-solving skills and attention to detail. Strong communication More ❯
cyber security engineering, ideally with experience in: CrowdStrike EDR, Mimecast, Tessian (or similar DLP) Intune, Entra ID, Active Directory Palo Alto firewalls, WAF, Menlo SecuritySecurity frameworks and compliance (PCI-DSS, ISO 27001, NIST, CIS) Networking knowledge and experience leading incident response. Relevant certifications such as CPSA, CISSP, or Palo Alto Network Certified Security Ops Professional . More ❯
cyber security engineering, ideally with experience in: CrowdStrike EDR, Mimecast, Tessian (or similar DLP) Intune, Entra ID, Active Directory Palo Alto firewalls, WAF, Menlo SecuritySecurity frameworks and compliance (PCI-DSS, ISO 27001, NIST, CIS) Networking knowledge and experience leading incident response. Relevant certifications such as CPSA, CISSP, or Palo Alto Network Certified Security Ops Professional . More ❯
cyber security engineering, ideally with experience in: CrowdStrike EDR, Mimecast, Tessian (or similar DLP) Intune, Entra ID, Active Directory Palo Alto firewalls, WAF, Menlo SecuritySecurity frameworks and compliance (PCI-DSS, ISO 27001, NIST, CIS) Networking knowledge and experience leading incident response. Relevant certifications such as CPSA, CISSP, or Palo Alto Network Certified Security Ops Professional . More ❯
with caching technologies (Memcache, Active MQ, Redis, APC, etc.) Experience with MySQL (Clusters, Replication, and Tuning) and Elasticsearch (Kibana a plus). Knowledge of security practices, networking protocols, firewalls, PCI compliance etc. System architecture experience required with a demonstrated ability to read the code and understand the coding logic to assist in troubleshooting Experience managing/monitoring AWS cloud More ❯
with caching technologies (Memcache, Active MQ, Redis, APC, etc.) Experience with MySQL (Clusters, Replication, and Tuning) and Elasticsearch (Kibana a plus). Knowledge of security practices, networking protocols, firewalls, PCI compliance etc. 10+ years of system architecture required with a demonstrated ability to read the code and understand the coding logic to assist in troubleshooting 0+ years' experience managing More ❯
You'll have a sound understanding of cyber and information security, including frameworks like NIST and ISO IEC 27002:202. It will be great if you also know about PCI-DSS V4.0 as well. Clear Communication -You'll be able to discuss these with technical and non-technical stakeholders in a way which is accessible and understood. Threat More ❯
Azure Network Engineer Associate • Experience with the following is preferred: o DevOps tools, such as Azure DevOps and Git o Cloud security and compliance frameworks, such as HIPAA and PCI-DSS o Azure and M365 migration and deployment projects o Certifications in cloud security, such as CompTIA Security+ Required: Active TS/SCI w/FSP Job Type More ❯
Newport, Gwent, Wales, United Kingdom Hybrid / WFH Options
Intellectual Property Office
team at the Intellectual Property Office. Playing a key part in an established team, the individual is responsible for ensuring the continued compliance with key security standards, such as PCI, ISO27001, secure by design, GovAssure etc. It is essential that this role ensures that security architecture alongside compliance are understood and therefore the role will include championing security by … but are not limited to: Ensure security architecture aligns with wider Gov security policies and frameworks, legal frameworks, industry regulations and best practise (e.g ISO 27001, NCSC Standards, GDPR, PCIDSS, GovAssure, Secure by Design). Support the secure by design champion in building awareness and understanding of secure by design framework across DDaT. Manage the security architecture More ❯
to business and technology audits. The role will also help provide ongoing assurance that digital systems and data are safe and secure. Key Accountabilities & Responsibilities: Be an SME for PCIDSS and contribute to and ensure compliance governance to security standards. Contribute to business and technology audits. Engagement with 3rd party partners as a SME and to ensure … in projects. Skills, Experience and Knowledge: Proven experience of IT GRC and Information/Cyber security Proven experience of risk and control management Proven experience of standards including ISO27001, PCI, GDPR/DPA & NIST Communication of complex ideas clearly in a non-technical way Strong stakeholder and 3rd party management experience Strong communication and collaboration Confident at working with More ❯
Salford, Greater Manchester, North West, United Kingdom Hybrid / WFH Options
Gerrard White
to business and technology audits. The role will also help provide ongoing assurance that digital systems and data are safe and secure. Key Accountabilities & Responsibilities: Be an SME for PCIDSS and contribute to and ensure compliance governance to security standards. Contribute to business and technology audits. Engagement with 3rd party partners as a SME and to ensure … in projects. Skills, Experience and Knowledge: Proven experience of IT GRC and Information/Cyber security Proven experience of risk and control management Proven experience of standards including ISO27001, PCI, GDPR/DPA & NIST Communication of complex ideas clearly in a non-technical way Strong stakeholder and 3rd party management experience Strong communication and collaboration Confident at working with More ❯
/TypeScript, as well as our backend services in C# (.NET), and Golang. Operate and maintain systems in Google Cloud Platform (GCP) and Amazon Web Services (AWS) environments. Ensure PCI compliance standards are upheld throughout the system. Work with the support team to triage, investigate, and resolve technical support tickets related to the payment platform and other customer facing … . Familiarity with CI/CD and infrastructures automation tools (Jenkins/Github Actions/Docker/Terraform). Familiarity with RESTful APIs and event-driven architectures. Knowledge of PCIDSS Compliance. Strong troubleshooting and debugging skills; experience working in production environments. Ability to break down complex problems and communicate them clearly to technical and non-technical audiences. More ❯
capabilities and infrastructure. Implementation experience with enterprise security solutions such as SSO, Federation, WAF, IPS, Anti-DDOS, and SIEM and understanding architectural implications of meeting industry standards such as PCIDSS, ISO 27001, GDPR, and NIST frameworks and relevant regulatory frameworks such as Thailand's Personal Data Protection Act B.E. 2562 (2019), BOT Notifications SorNorSor 21/ More ❯
Azure Network Engineer Associate • Experience with the following is preferred: o DevOps tools, such as Azure DevOps and Git o Cloud security and compliance frameworks, such as HIPAA and PCI-DSS o Azure and M365 migration and deployment projects o Certifications in cloud security, such as CompTIA Security+ Required: Active TS/SCI w/FSP Job Type More ❯
Azure Network Engineer Associate • Experience with the following is preferred: o DevOps tools, such as Azure DevOps and Git o Cloud security and compliance frameworks, such as HIPAA and PCI-DSS o Azure and M365 migration and deployment projects o Certifications in cloud security, such as CompTIA Security+ Required: Active TS/SCI w/FSP Job Type More ❯
Azure Network Engineer Associate • Experience with the following is preferred: o DevOps tools, such as Azure DevOps and Git o Cloud security and compliance frameworks, such as HIPAA and PCI-DSS o Azure and M365 migration and deployment projects o Certifications in cloud security, such as CompTIA Security+ Required: Active TS/SCI w/FSP Job Type More ❯
Ansible, CloudFormation). Experience in root cause analysis and implementing systemic improvements. Preferred: Significant experience with UX/UI writing or design Knowledge of regulatory standards and compliance (e.g., PCIDSS, HIPAA). Certifications in cloud platforms (e.g., AWS Certified Solutions Architect, Google Cloud Engineer). Strong communication skills and the ability to work collaboratively with cross functional More ❯
Transformation: Ensure successful delivery of network upgrades, capacity enhancements, and new connectivity services while maintaining zero disruption to production services. Governance & Compliance: Implement operational processes aligned with ISO 27001, PCIDSS, and other relevant compliance frameworks. Cost & Budget Ownership: Optimise network OPEX and vendor spend through strategic negotiations, vendor consolidation, and improved service efficiency. Automation & Monitoring: Drive adoption More ❯
within the Practice by defining standards, sharing knowledge, and mentoring peers Influence customer outcomes through expert knowledge of DevSecOps tools and compliance frameworks like NIST, CIS, SOC 2, and PCIDSS You'll travel to client sites across the UK, working directly with business and technical stakeholders to drive real business value What you'll need Proven experience More ❯